Weekly ThreatsDay Bulletin: supply chain attacks, fake support lures, AI tampering, data leaks, ransomware, and exploited ...

Kazuar, a sophisticated malware family attributed to the Russian state actor Secret Blizzard, has been under constant development for years and continues to evolve in support of espionage-focused ...

Who won?: Gemini 3.1 Pro claimed first place in a multi-AI Python debugging challenge, outperforming ChatGPT and Claude. What was tested?: The flawed script contained syntax errors, path handling ...

Four research teams found the same confused deputy failure in Claude across three surfaces in 48 hours. This audit matrix ...

Google's GTIG identified the first zero-day exploit developed with AI and stopped a mass exploitation event. The report documents state actors using AI for vulnerability research and autonomous ...

May the best coding AI win!

Google says attackers are using AI for zero-day research, malware development, reconnaissance, and access to premium AI tools ...

Security researchers have uncovered covert infostealer malware hidden in one of the top-ranking repositories on Hugging Face, ...

TeamPCP’s Mini Shai-Hulud campaign used hijacked GitHub OIDC tokens to spread a credential-stealing worm through TanStack npm ...

今天这篇文章，我把生产环境中见过的所有crontab坑一次性讲透，看完你再也不会被定时任务不执行的问题折磨。 你有没有过这种经历：熬到凌晨写好了备份脚本，手动执行完美运行，信心满满地加到crontab里，结果第二天早上一看——任务根本没执行！数据没 ...